CVE

Id
91623  
CVE No.
CVE-2016-4804  
Status
Candidate  
Description
The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function.  
Phase
Assigned (20160514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
786723 91623 CVE-2016-4804 MISC:https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html  View
786724 91623 CVE-2016-4804 CONFIRM:https://github.com/dosfstools/dosfstools/commit/e8eff147e9da1185f9afd5b25948153a3b97cf52  View
786725 91623 CVE-2016-4804 CONFIRM:https://github.com/dosfstools/dosfstools/issues/25  View
786726 91623 CVE-2016-4804 CONFIRM:https://github.com/dosfstools/dosfstools/issues/26  View
786727 91623 CVE-2016-4804 SUSE:openSUSE-SU-2016:1461  View
786728 91623 CVE-2016-4804 URL:http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html  View
786729 91623 CVE-2016-4804 SUSE:openSUSE-SU-2016:2233  View
786730 91623 CVE-2016-4804 URL:http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html  View
786731 91623 CVE-2016-4804 UBUNTU:USN-2986-1  View
786732 91623 CVE-2016-4804 URL:http://www.ubuntu.com/usn/USN-2986-1  View
786733 91623 CVE-2016-4804 BID:90311  View

Related JVN